OBCORD LTD and Online Formula Racing

1. Controller and scope

OBCORD LTD is the data controller for the services covered by this policy. This policy applies to the OBCORD company website, the Online Formula Racing public website and portal, the OFR API, the OFR mobile applications, and the related Discord bot flow used to provision or manage access to OFR accounts.

The onlineformularacing.com address redirects to onlineformularacing.co.uk and is covered by the same policy. The images.onlineformularacing.co.uk host used for OFR media and image assets is also covered by this policy.

2. What we collect

We do not operate advertising tracking, analytics, payment processing, or social login providers for these services.

Depending on how you use the services, we may process the following categories of data:

• Account data such as your username, internal user ID, and the credentials needed to let you sign in.
• Discord-linked account data used for provisioning or managing access, limited to your Discord user ID and Discord username.
• Competition and service data such as league membership, race results, standings, reports, penalties, privileges, and related service activity you create or take part in.
• Technical and security data such as IP address, browser or device information, and server logs generated when you use the websites, API, or apps.
• Device token data used only when you enable mobile push notifications in the OFR mobile apps.
• Browser-stored local data on the OFR website, including theme preference, selected API target, access token, signed-in user details, selected league or division, and unfinished form drafts required for the portal to work properly.
• Embedded third-party media data when you load externally hosted evidence or media inside reports or related content.

3. How we use the data

We use the data above to run and secure the services, authenticate users, provision accounts, operate leagues and events, publish results and standings, manage reports and privileges, send service notifications you enable, and respond to support or privacy requests.

4. Lawful bases

We process personal data where it is necessary to provide the services you use, where it is necessary for our legitimate interests in operating, securing, and improving those services, and where it is necessary to comply with legal obligations. Where a feature depends on your choice, such as enabling push notifications on a device, we rely on that action and the related device permissions.

5. Sharing

We do not sell personal data. We do not use advertising networks, analytics platforms, payment providers, or social login providers for the services covered by this policy.

Data may be processed by infrastructure and communications services that are necessary to run OFR, such as hosting, Discord for the account provisioning flow you choose to use, Apple Push Notification service, and Firebase Cloud Messaging where you enable mobile push notifications.

6. Retention

OFR competition records, including usernames attached to race results and related sporting history, are retained indefinitely so the service can preserve league history, standings, and auditability. Where appropriate and technically feasible, account-related data can be anonymised on request.

Operational logs, tokens, drafts, and other technical records are retained for as long as needed to run, secure, troubleshoot, and support the services, or for longer where required to resolve disputes, enforce rules, or comply with legal obligations.

7. Cookies and local storage

The current OFR website build does not run analytics tracking or advertising tracking. It does use browser local storage so the portal can keep you signed in, remember interface choices, and reduce accidental loss of in-progress work.

8. Children

These services are not directed at children under 13, and we do not knowingly collect personal data from children under 13.

9. Your rights

Subject to applicable law, you may ask for access to your personal data, correction of inaccurate data, erasure, restriction of processing, or objection to processing. You may also ask for data associated with your account to be anonymised where that is appropriate for the service and does not prevent us from keeping necessary sporting, security, or legal records.

10. Changes

We may update this policy from time to time to reflect service changes, legal requirements, or operational changes. The latest published version on this site applies from its stated update date.

11. Contact

Privacy, account, and data protection enquiries can be sent to help@obcord.com.